Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.cer
File:                     F427EBED04EEA9E14CD726DEB3CC299993C1802E.cer (raw, json)
Hash identifier:          y1154K+4E/0/J0u5Ds5UHocVFt11LYHfkLvarwRwkuk=
Subject key identifier:   F4:27:EB:ED:04:EE:A9:E1:4C:D7:26:DE:B3:CC:29:99:93:C1:80:2E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6899372B8D4BEFBE9295822D87CEC776A9A497AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 02 Feb 2024 19:05:06 +0000
Certificate not after:    Fri 31 Jan 2025 19:10:06 +0000
Subordinate resources:    AS: 264332
                          IP: 138.185.20.0/22
                          IP: 2804:2634::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:99:37:2b:8d:4b:ef:be:92:95:82:2d:87:ce:c7:76:a9:a4:97:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  2 19:05:06 2024 GMT
            Not After : Jan 31 19:10:06 2025 GMT
        Subject: CN=F427EBED04EEA9E14CD726DEB3CC299993C1802E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b6:7f:34:fe:92:e0:39:33:c7:a3:0a:42:1e:
                    53:11:d0:f9:ed:b3:69:10:d1:06:b6:9c:ae:00:ec:
                    ab:bf:62:24:56:68:a9:14:9e:c5:2c:37:23:c1:4c:
                    6d:7f:42:03:d9:15:de:da:ff:90:ef:0e:a0:71:1b:
                    72:87:e4:c9:ea:39:fe:ea:65:cc:b1:d9:9c:ca:0b:
                    d6:38:26:02:c7:96:b0:f8:bf:e9:32:83:49:a2:50:
                    f3:b9:2a:52:9c:5d:9f:b1:6a:23:87:c0:09:4f:d9:
                    2b:26:b1:a1:0a:61:30:54:dc:7d:ee:c5:82:a7:f8:
                    87:b6:27:ac:45:4c:53:09:6e:0e:a4:c0:ef:52:f9:
                    ab:b6:8c:f2:4c:30:05:35:53:7c:b0:87:9c:69:a4:
                    f1:e0:99:0c:89:84:06:8d:fe:c0:f8:dc:5c:9a:f2:
                    5e:06:a0:8e:3b:bf:75:9d:68:a6:54:83:e1:77:47:
                    73:ca:ac:5d:68:4a:1d:7c:75:93:a5:5c:1a:74:3d:
                    96:f6:77:d7:72:2d:08:d8:ec:a7:41:e2:fa:99:fa:
                    7f:2b:49:7f:b6:02:de:a6:7f:f0:f4:6a:af:06:78:
                    e5:02:31:bf:25:f8:c3:9b:32:b1:3b:4e:c9:a3:00:
                    2b:f4:b9:43:42:3a:67:41:93:6b:78:c7:6c:a1:4f:
                    ad:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F4:27:EB:ED:04:EE:A9:E1:4C:D7:26:DE:B3:CC:29:99:93:C1:80:2E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.20.0/22
                IPv6:
                  2804:2634::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264332

    Signature Algorithm: sha256WithRSAEncryption
         69:1d:cb:48:6f:98:a3:5a:ea:0d:a7:a0:61:dd:15:f4:fa:3c:
         72:06:21:a6:13:79:18:0d:fa:f1:ea:fd:d0:f1:cd:f1:ce:4d:
         1a:51:ff:7b:65:bc:2b:3f:07:17:16:41:ee:3f:e5:76:b6:4d:
         64:37:96:76:8d:0f:9c:ff:a6:2f:ea:f4:9d:70:d1:9f:71:48:
         e8:1a:99:ec:65:77:3a:ae:60:07:d3:a2:30:3f:d3:e1:a7:82:
         d3:87:34:55:ea:83:23:a6:a9:cb:6c:68:ae:be:0d:e9:97:31:
         93:12:45:98:53:e0:c8:a9:52:79:ca:5b:c3:2d:af:b8:da:18:
         ee:02:ff:72:47:f7:62:62:31:e3:bc:83:6f:90:5b:19:f7:25:
         a3:82:cb:40:ac:db:e7:e4:1c:d1:6d:8b:f7:13:45:81:c9:4f:
         2b:7d:9d:eb:c5:12:aa:89:5f:c1:b8:c9:f4:e8:c2:11:b6:f4:
         b5:8b:74:57:2d:55:1e:86:c3:90:86:be:14:bf:15:92:2a:b2:
         9b:15:a1:ce:55:53:66:4a:d1:43:54:1b:50:c0:62:97:2c:87:
         f2:8c:f8:2c:89:20:98:ce:55:60:ff:cb:58:4f:4f:19:3e:65:
         e1:51:3d:f1:93:29:98:04:35:17:ef:44:27:63:74:6d:3c:a6:
         35:80:f6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----